Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jun 24, 2025

Bumps hashicorp/random from 3.6.2 to 3.7.2.

Release notes

Sourced from hashicorp/random's releases.

v3.7.2

3.7.2 (April 22, 2025)

NOTES:

  • Update dependencies (#683)

v3.7.1

NOTES:

FEATURES:

  • ephemeral/random_password: New ephemeral resource that generates a password string. When used in combination with a managed resource write-only attribute, Terraform will not store the password in the plan or state file. (#625)

v3.7.0

NOTES:

FEATURES:

  • ephemeral/random_password: New ephemeral resource that generates a password string. When used in combination with a managed resource write-only attribute, Terraform will not store the password in the plan or state file. (#625)

v3.7.0-alpha1

3.7.0-alpha1 (February 13, 2025)

NOTES:

  • all: This release is being used to test new build and release actions.

v3.6.3

NOTES:

  • all: This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#604)
Changelog

Sourced from hashicorp/random's changelog.

3.7.2 (April 22, 2025)

NOTES:

  • Update dependencies (#683)

3.7.1 (February 25, 2025)

NOTES:

FEATURES:

  • ephemeral/random_password: New ephemeral resource that generates a password string. When used in combination with a managed resource write-only attribute, Terraform will not store the password in the plan or state file. (#625)

3.7.0 (February 25, 2025)

NOTES:

FEATURES:

  • ephemeral/random_password: New ephemeral resource that generates a password string. When used in combination with a managed resource write-only attribute, Terraform will not store the password in the plan or state file. (#625)

3.7.0-alpha1 (February 13, 2025)

NOTES:

  • all: This release is being used to test new build and release actions.

3.6.3 (September 11, 2024)

NOTES:

  • all: This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#604)
Commits
  • bc2ddb5 chore: Prepare for v3.7.2 release (#684)
  • a83e097 build(deps): Bump golang.org/x/net from 0.37.0 to 0.38.0 (#683)
  • 0d7c820 build(deps): Bump golang.org/x/net from 0.37.0 to 0.38.0 in /tools (#682)
  • 56acec7 SEC-090: Automated trusted workflow pinning (2025-04-07) (#680)
  • 5bc624b build(deps): Bump golang.org/x/crypto from 0.36.0 to 0.37.0 (#681)
  • 6fa11c2 Update build.yml (#678)
  • 532c47c Result of tsccr-helper -log-level=info gha update -latest .github/ (#677)
  • d4a08ef build(deps): Bump github.com/golang-jwt/jwt/v4 in /tools (#676)
  • 2364b8d build(deps): Bump github.com/hashicorp/copywrite in /tools (#675)
  • af8cfbe build(deps): Bump github.com/hashicorp/terraform-plugin-testing (#674)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [hashicorp/random](https://github.com/hashicorp/terraform-provider-random) from 3.6.2 to 3.7.2.
- [Release notes](https://github.com/hashicorp/terraform-provider-random/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-random/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-random@v3.6.2...v3.7.2)

---
updated-dependencies:
- dependency-name: hashicorp/random
  dependency-version: 3.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jun 24, 2025

Assignees

The following users could not be added as assignees: workloads/maintainers. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file terraform Pull requests that update Terraform code labels Jun 24, 2025
@dependabot dependabot bot requested a review from a team as a code owner June 24, 2025 15:27
@dependabot dependabot bot removed the request for review from a team June 24, 2025 15:27
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 24, 2025
@dependabot dependabot bot requested a review from workloads-bot June 24, 2025 15:27
@dependabot dependabot bot added the terraform Pull requests that update Terraform code label Jun 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file terraform Pull requests that update Terraform code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants